Uninitialized Pointer Vulnerability in Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)

CVE-2021-22639 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

Learn more about our Cis Benchmark Audit For Server Software.